Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.137exploits catalogados
35.961CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8773Nuclei 4340Metasploit 3485✓ solo verificadosrecientespopularesriesgo
24.458 exploits
Exploit-DB✓ VexDay Proof
Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
CVE-2005-1779—webappsasp26 may 2005
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Exim 4.41 - 'dns_build_reverse' Local Read Emails
CVE-2005-0021—locallinux25 may 2005
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Berlios GPSD 1.91-1 < 2.7-2 - Format String
CVE-2004-1388—remotelinux25 may 2005
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Sun JavaMail 1.x - Multiple Information Disclosure Vulnerabilities
CVE-2005-1754—webappsjava24 may 2005
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a f
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
GForge 3.x - Arbitrary Command Execution
CVE-2005-1752—webappsphp24 may 2005
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell m
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Blue Coat Reporter 7.0/7.1 - Privilege Escalation
CVE-2005-1708—remotewindows24 may 2005
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain adminis
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service
CVE-2005-1741—doswindows24 may 2005
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malfo
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Blue Coat Reporter 7.0/7.1 - License HTML Injection
CVE-2005-1709—remotewindows24 may 2005
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Warrior Kings: Battles 1.23 - Remote Denial of Service
CVE-2005-1703—dosmultiple23 may 2005
Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a partia
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Warrior Kings 1.3 And Warrior Kings: Battles 1.23 - Remote Format String
CVE-2005-1702—remotemultiple23 may 2005
Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
TCP TIMESTAMPS - Denial of Service
CVE-2005-0356—dosmultiple21 may 2005
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled
45RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
MWChat 6.8 - 'chat.php' SQL Injection
CVE-2005-3324—webappsphp21 may 2005
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebAPP 0.9.9.2.1 - Remote Command Execution (1)
CVE-2005-1628—webappscgi20 may 2005
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - 'server_databases.php' Cross-Site Scripting
CVE-2005-3301—webappsphp20 may 2005
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
phpMyAdmin 2.x - 'queryframe.php' Cross-Site Scripting
CVE-2005-3301—webappsphp20 may 2005
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
WebAPP 0.9.9.2.1 - Remote Command Execution (2)
CVE-2005-1628—webappscgi20 may 2005
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Picasm 1.10/1.12 - Error Generation Remote Buffer Overflow
CVE-2005-1679—remotefreebsd20 may 2005
Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary cod
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
cPanel 9.1 - 'User' Cross-Site Scripting
CVE-2005-2021—webappsphp20 may 2005
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web scrip
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
PHP Advanced Transfer Manager 1.21 - Arbitrary File Inclusion
CVE-2005-1681—webappsphp19 may 2005
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attac
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
D-Link DSL Router - Remote Authentication Bypass
CVE-2005-1827—remotehardware19 may 2005
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Gaim 1.2.1 - URL Handling Remote Stack Overflow
CVE-2005-1261—doslinux17 may 2005
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrar
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
War Times - Remote Game Server Denial of Service
CVE-2005-1718—doswindows17 may 2005
Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server cras
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.12-rc4 - 'ioctl_by_bdev' Local Denial of Service
CVE-2005-1589—doslinux17 may 2005
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier call
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)
CVE-2005-1009—remotewindows17 may 2005
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mod
50RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)
CVE-2005-1547—remotewindows17 may 2005
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection
CVE-2005-1637—webappsphp16 may 2005
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection
CVE-2005-1633—webappsphp16 may 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection
CVE-2005-1633—webappsphp16 may 2005
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrar
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
pserv 3.2 - Directory Traversal
CVE-2005-1365—remotelinux16 may 2005
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leadin
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Mozilla Suite And Firefox - DOM Property Overrides Code Execution
CVE-2005-1532—remotemultiple16 may 2005
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objec
23RIESGO
abrir ↗
← anteriorpágina 666 / 816siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.